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CLAIMS 

1 . A method for controlling access to a data set, the method comprising the 
steps of: 

5 identifying an associated extension rights control module, wherein the 

associated extension rights generates an authorization for a desired type of access 
to a data set and the associated extension rights control module is separate from a 
DRM core; 

requesting the authorization for the desired type of access to the data set 
10 through the associated extension rights control module; 

receiving the authorization from the associated extension rights control 
module if a set of usage conditions for the desired type of access is satisfied; and 

granting, in response to receipt of the authorization, the desired type of 
access. 

15 

2. The method of claim 1 , further comprising the step of authenticating the 
associated extension rights control module. 

3. The method of claim 1 , wherein the data set comprises at least one of a 

20 multi-media presentation, an audio program, a database and a document data set. 

4. The method of claim 1 , wherein the associated extension rights control 
module is installed prior to the step of requesting. 

25 5. The method of claim 1 , wherein the associated extension rights control 
module is located in at least one of the data set, a remote device and an external 
DPR library. 
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6. A method for controlling access to a data set, the method comprising the 
steps of: 

accepting a rights request to a data set, wherein the data set is associated 
with a digital property rights list specified in a rights management language; 

determining if the rights request is contained within the digital property rights 

list; 

determining if an associated extension rights control module is required to 
authorize a requested right that is specified by the rights request; 

retrieving the associated extension rights module in response to a 
determination that the associated extension rights control module is required; 

requesting an authorization for the requested right from the associated 
extension rights module; and 

granting the desired type of access in response to the authorization. 

7. The method of claim 6, further comprising the step of validating the digital 
property rights list. 

8. The method of claim 6, further comprising the step of authenticating the 
associated extension rights control module. 

9. The method of claim 6, wherein the rights management language is the XML 
markup language. 
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10. A system for controlling access to a data set, the system comprising: 
an associated extension rights control module, wherein the associated 

extension rights generates an authorization for a desired type of access to a data 
set if a set of usage conditions for the desired type of access is satisfied; and 
5 a rights manager which requests the authorization for the desired type of 

access to the data set through the associated extension rights control module, and 
which grants, in response to receipt of the authorization, the desired type of access. 

1 1 . The system of claim 10, further comprising an extension rights control module 
verifier for authenticating the associated extension rights control module. 

1 2. The system of claim 1 0, wherein the data set comprises at least one of a 
multi-media presentation, an audio program, a database and a document data set. 

13. The system of claim 10, wherein the associated extension rights control 
module is loaded prior to a request for the desired type of access. 

14. The system of claim 10, wherein the associated extension rights control 
module is located in at least one of a file containing the data set, a remote device 
and a downloadable module. 
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1 5. A system for controlling access to a data set, the system comprising: 
an associated extension rights control module, wherein the associated 

extension rights generates an authorization for a desired type of access to a data 
set if a set of usage conditions for the desired type of access is satisfied; and 
5 a rights manager for: 

accepting a rights request to a data set, wherein the data set 
comprises a digital property rights list specified in a rights management 
language; 

determining if the rights request is contained within the digital property 
10 rights list; 

determining if the associated extension rights control module is 
installed within the rights manager; 

retrieving the associated extension rights module in response to a 
determination that the associated extension rights control module is required; 
1 5 requesting an authorization for the requested right from the associated 

extension rights module; and 

granting the desired type of access in response to the authorization. 

1 6. The system of claim 1 5, wherein the rights manager further verifies the digital 
20 property rights list. 

1 7. The system of claim 1 5, wherein the rights manager further verifies the 
associated extension rights control module. 

25 1 8. The system of claim 1 5, wherein the rights management language is the XML 
markup language. 
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1 9. A machine-readable medium encoded with a program for controlling access 
to a data set, the program containing instructions for performing the steps of: 

identifying an associated extension rights control module, wherein the 
associated extension rights generates an authorization for a desired type of access 
5 to a data set and the associated extension rights control module is separate from a 
DRM core; 

requesting the authorization for the desired type of access to the data set 
through the associated extension rights control module; 

receiving the authorization from the associated extension rights control 
1 0 module if a set of usage conditions for the desired type of access is satisfied; and 

granting, in response to receipt of the authorization, the desired type of 
access. 

20. The computer readable medium of claim 1 9, further comprising the step of 
15 authenticating the associated extension rights control module. 

21 . The computer readable medium of claim 1 9, wherein the data set comprises 
at least one of a multi-media presentation, an audio program, a database and a 
document data set. 

20 

22. The computer readable medium of claim 19, wherein the associated 
extension rights control module is installed prior to performing the step of 
requesting. 

25 23. The computer readable medium of claim 1 9, wherein the associated 

extension rights control module is located in at least one of a file containing the data 
set, a remote device and a downloadable module. 
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24. A machine-readable medium encoded with a program for controlling access 
to a data set, the program containing instructions for performing the steps of: 

accepting a rights request to a data set, wherein the data set comprises a 
digital property rights list specified in a rights management language; 
5 determining if the rights request is contained within the digital property rights 

list; 

determining if an associated extension rights control module is required to 
authorize a requested right specified by the rights request; 

retrieving the associated extension rights module in response to a 
10 determination that the associated extension rights control module is required; 
% requesting an authorization for the requested right from the associated 

□ extension rights module; and 

u granting the desired type of access in response to the authorization. 

,p 1 5 25. The computer readable medium of claim 24, further comprising the step of 
% validating the digital property rights list. 

ffi 26. The computer readable medium of claim 24, further comprising the step of 

authenticating the associated extension rights control module. 

20 

27. The computer readable medium of claim 24, wherein the rights management 
language is the XML markup language. 
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